Circle’s USDC Freeze Powers Under Fire After Alleged Inconsistent Wallet Blocks

Circle’s ability to freeze USD Coin (USDC) on-chain—a control long marketed as a safety feature—is drawing renewed scrutiny after an on-chain investigation alleged that the company moved slowly to block hundreds of millions in stolen funds while rapidly freezing a batch of operational business wallets tied to a sealed US civil matter.

For traders, exchanges, and compliance teams that rely on USDC as core settlement infrastructure, the controversy goes beyond a single incident. It raises a structural question: how, when, and under what standards does the largest regulated dollar stablecoin issuer exercise unilateral control over balances on-chain?

The latest controversy: 16 operational wallets vs. $420 million in alleged thefts

On-chain analyst ZachXBT’s “Circle Files” allege a striking contrast in how Circle has applied its freeze powers since 2022. According to his review, Circle was slow to act in 15 theft-related cases involving more than $420 million in allegedly illicit funds, yet moved quickly and broadly to freeze 16 operational business wallets in response to a sealed US civil matter.

The affected wallets were associated with exchanges, casinos, and forex services that, based on information reviewed by ZachXBT, did not appear directly connected to the underlying dispute. At least one of those wallets—belonging to Goated.com—was later unfrozen by Circle, sharpening questions about how rigorously addresses are screened before landing on the blocklist.

The timing of this tension is especially sensitive. USDC had roughly $77.2 billion in circulation as of April 3, within a stablecoin market of about $316.8 billion, giving it roughly 24.5% share. That scale makes any perceived inconsistency in freeze decisions a systemic issue for crypto liquidity and payments.

One of the most prominent examples cited is the Drift exploit, where more than $280 million in USDC moved across over 100 transactions in about six hours. With that activity observable in real time on-chain, critics argue that the gap between “can freeze” and “froze in time” is where the real-world effectiveness of Circle’s control is ultimately judged.

How USDC’s on-chain controls actually work

USDC’s design bakes issuer control directly into its token architecture. Circle’s EVM stablecoin contracts include a blocklist function administered under a dedicated “blocklister” role. Once an address is blocklisted, it can neither send nor receive USDC. The contracts are also pausable and upgradeable, giving Circle broad technical latitude to intervene.

This technical surface predates the current controversy and is governed by a formal Access Denial Policy that outlines when Circle will block addresses. That policy sits alongside the USDC Terms and the Circle Mint User Agreement, which together define the legal framework for how and when USDC balances can be frozen or accounts suspended.

Importantly, Circle can apply blocklisting across every blockchain where its stablecoins are issued. When activated, the effect is absolute on-chain: the balance can no longer move, even though the token remains visible on the ledger. For users and businesses, this means an operational wallet can shift from fully liquid to effectively unusable at the contract level.

The legal framework: narrow policy, broad discretion

Circle’s documentation creates a layered hierarchy of control that, taken together, gives the issuer more latitude than its narrow Access Denial Policy alone might imply.

The Access Denial Policy restricts freezes to two core triggers. First, Circle may act, in its sole discretion, when failing to do so would pose a threat to network security or integrity. Second, Circle must comply with valid legal orders from recognized US or French authorities. In this framing, freezes are positioned as exceptional, tied to security events or explicit legal compulsion.

Other legal documents, however, expand that scope. The USDC Terms state that Circle is not obligated to track, verify, or determine the provenance of users’ USDC balances—limiting what users can reasonably expect the issuer to do in monitoring illicit activity. At the same time, those terms reserve the right for Circle to block addresses and freeze associated USDC when it determines, at its discretion, that funds may be tied to illegal activity.

The Circle Mint User Agreement goes further still, authorizing Circle to suspend accounts in its “sole and absolute discretion,” including in response to court orders, and to restrict redemptions or transfers when required by law or legal process. When these layers conflict, Circle’s own hierarchy effectively prioritizes regulatory compliance and issuer control over user continuity.

This stack helps explain why a sealed civil matter could trigger rapid, broad freezes of operational wallets, while hack-related incidents—where legal orders may be absent or slower to arrive—can see longer response times, even when stolen funds are clearly visible moving on-chain.

Why investigators say Circle’s freeze decisions are inconsistent

The crux of current criticism is not that Circle has freeze powers, but how those powers are deployed across different situations. In the 16-wallet incident flagged by ZachXBT, Circle appears to have acted quickly and expansively in response to civil legal process, capturing multiple businesses in a single sweep and later reversing at least one freeze.

By contrast, the same on-chain sleuth alleges that Circle moved too slowly in 15 theft-related cases since 2022, even as substantial sums of stolen USDC were being moved across the open ledger. The Drift exploit—more than $280 million flowing through over 100 transactions within six hours—has become the emblematic example of this gap between technical capability and operational execution.

For exchanges, payment companies, and DeFi protocols that hold USDC in hot wallets, the concern is twofold. First, they must account for the risk that operational funds may be frozen swiftly pursuant to legal process with limited visibility into how addresses are evaluated. Second, they must weigh whether USDC’s on-chain controls, combined with Circle’s monitoring practices, consistently deliver timely intervention when theft or exploits occur.

Those questions now intersect directly with how regulators assess real-world enforcement outcomes, putting Circle’s governance under a sharper lens.

Regulation, GENIUS Act, and the growing bar for stablecoin oversight

US policy developments have raised the stakes. The GENIUS Act, signed into law in July 2025, established a federal framework for payment stablecoins, treating instruments like USDC as regulated financial infrastructure. The Office of the Comptroller of the Currency (OCC) is in the process of implementing that framework, with a proposal currently open for comment until May 1.

Globally, regulators are focused not just on the existence of controls, but on their effectiveness. A March 2026 report from the Financial Action Task Force (FATF) emphasized that supervisors should evaluate whether blockchain analytics and related controls actually lead to tangible enforcement results, particularly around asset tracing and recovery. The report also stressed the importance of timely coordination between public authorities and private issuers.

This is the same standard now being applied to Circle by independent investigators and affected operators. Circle markets USDC as fully backed, transparently managed, and the world’s largest regulated stablecoin. In its 2026 Internet Financial System report, the company highlighted more than $50 trillion in cumulative USDC settlement, 40% of stablecoin transaction volume, and 29% of stablecoin circulation as of September 2025.

At that level of adoption, how freeze powers are governed becomes a matter of systemic importance, not just a contractual detail. The current scrutiny reflects the infrastructure role Circle has actively sought: a central settlement layer for crypto markets and payments operating under regulatory oversight.

Two strategic futures: governance upgrade or slow erosion

From here, industry observers see two broad paths for Circle.

On the constructive “bull” path, Circle responds with greater transparency and operational rigor. That would likely mean publishing clearer standards for freezes triggered by civil legal processes, including what internal reviews must occur before operational business wallets are blocklisted. It would also involve demonstrating materially faster and more coordinated responses in future hacks and exploits, aligning on-chain actions more closely with real-time data and regulatory expectations.

If Circle can deliver on those fronts—while operating under regimes like the GENIUS Act and Europe’s MiCA—the company could strengthen its position as the most institutionalized issuer in the sector. In such a scenario, market participants could interpret the recent controversy as a necessary phase in the maturation of freeze governance. Analysts in the original report suggest that USDC circulation could plausibly move back toward the $82–$90 billion range, with a market share closer to 25–27%.

The “bear” path is an accumulation of incidents that signal to operators that Circle’s discretion is an operational liability. More cases of slow responses to exploits, or broad freezes linked to civil matters that ensnare unrelated businesses, may encourage exchanges, payment firms, and DeFi protocols to diversify their settlement rails.

Crucially, a stablecoin can retain its $1 peg while losing strategic relevance. A gradual shift of liquidity and settlement away from USDC toward alternatives such as Tether, PYUSD, or other issuer-specific tokens would not necessarily show up as a depeg event. Instead, it would surface in circulation trends and market share, with USDC potentially drifting toward a $68–$75 billion range and a 20–23% share as businesses reprice the risk of depending on Circle’s opaque review standards.

The next inflection point will likely be driven by real-world performance: how Circle handles the next major exploit, how quickly wrongly frozen wallets are restored, and whether future freezes come with clearer, consistent rationale. All of this will unfold as the OCC’s comment window closes and the regulatory architecture for payment stablecoins solidifies.

For investors and compliance professionals, the core question is no longer whether Circle has the power to freeze USDC—that is well established in both code and contracts. The question is whether that power is being applied in a way that protects users and the broader ecosystem, or whether it is concentrating too much unaccountable control in a single issuer whose internal standards remain largely out of view.